
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft
File: 801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft (raw, json)
Hash identifier: CuXIrBRa3ZshV9Mx+/5Re7LVgR5Rf7qAFUzdBETu8os=
Subject key identifier: A4:8B:DA:31:76:24:AF:52:BD:C5:22:41:A4:40:59:08:4E:B6:CB:B3
Authority key identifier: 80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24
Certificate issuer: /CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724
Certificate serial: 30CEA78EAFFB2D7B06570FB8A044EDE222C58C90
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 05:49:56 +0000
Manifest this update: Wed 17 Jun 2026 05:44:56 +0000
Manifest next update: Thu 18 Jun 2026 09:33:56 +0000
Files and hashes: 1: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: 5qu3egPdBZlEVTvgirw7pWXgCRudPnC+xEwHD5lFYU8=)
2: 801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl (hash: CzQ398Gl02VEa30Xl058G++55qsDmXTM/+/s2BiY5p0=)
3: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 4a9og07u0srQecoyb+IpBZCUaRdvfCWkjUR0wkeGFvU=)
4: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: PF2pFQ8Y4MjWEElnBJwyA+RuYK7yYkD7ChXjYqS9lpw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl
rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ce:a7:8e:af:fb:2d:7b:06:57:0f:b8:a0:44:ed:e2:22:c5:8c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724
Validity
Not Before: Jun 17 05:44:56 2026 GMT
Not After : Jun 18 09:33:56 2026 GMT
Subject: CN=A48BDA317624AF52BDC52241A44059084EB6CBB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ab:2b:21:71:82:a4:4f:9e:3d:e0:ee:26:3c:
cf:a3:8d:4e:7b:90:c0:b1:ef:56:5e:f7:bf:da:d2:
1e:57:15:18:32:d4:25:3a:3d:86:b9:d1:b7:ca:8b:
6d:a3:51:11:48:e6:b0:19:54:d1:d4:4b:fe:f8:eb:
4e:71:fa:47:09:fc:45:5d:60:a7:49:28:8a:d3:7f:
ad:b6:09:df:87:8f:d8:84:47:83:62:51:51:2c:d9:
d3:69:18:14:fa:49:bc:3b:bc:6f:cb:19:e2:62:4c:
d6:34:26:16:d6:51:58:ef:3b:df:7a:82:b1:97:d9:
a3:32:b6:8e:48:77:b7:ce:db:7a:89:49:0d:48:36:
d9:5d:90:75:e8:0a:dc:9c:48:65:1f:fc:cc:17:d7:
b3:b3:df:2b:cf:22:4b:07:24:ae:6e:4f:5f:f5:62:
89:63:15:c6:c1:b4:14:15:6c:c8:9b:34:28:8e:07:
2a:eb:9c:63:58:57:e5:f5:cb:8d:be:7f:df:ab:fa:
84:d2:66:5a:f2:b5:e3:0d:0e:db:46:c3:56:a3:1c:
32:7b:87:21:f6:00:ce:b9:5e:ae:ec:ac:bc:d3:37:
da:8c:67:2f:39:32:18:6f:f8:b3:1b:ea:1a:58:3f:
23:2e:cd:0b:1f:9c:7f:ac:c3:af:a1:d8:5a:2b:ca:
13:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8B:DA:31:76:24:AF:52:BD:C5:22:41:A4:40:59:08:4E:B6:CB:B3
X509v3 Authority Key Identifier:
keyid:80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ca:ab:0b:c1:08:10:2e:65:43:8b:c0:41:b2:07:01:b5:61:
a9:b4:66:be:94:b9:8b:b9:cd:9b:cf:c0:cd:6d:9f:3d:df:d0:
87:4b:88:dc:22:c8:41:ff:c7:56:38:f2:35:ae:ed:ad:7d:12:
5b:d9:81:33:15:2e:93:15:ef:07:6d:db:3f:10:c1:98:fc:62:
28:9e:be:23:21:68:1a:79:88:a0:44:ca:bf:04:02:16:b9:51:
41:61:78:38:6a:21:e2:f5:6e:96:53:a4:1e:c7:5b:09:26:cf:
0a:d7:1d:ee:19:78:21:7e:20:14:85:a8:69:fe:05:a6:f1:7e:
0f:57:e1:20:ec:b6:80:3e:77:9d:38:7e:f9:9d:20:37:d4:f3:
74:fc:de:67:1b:96:24:ba:96:4a:a8:1e:03:0b:b1:8c:37:65:
52:8d:43:f1:d1:55:83:40:4c:af:21:c7:a4:90:56:3f:7a:8d:
08:01:b0:2e:35:25:05:2c:b4:17:84:85:09:96:5c:0f:35:8a:
44:da:ba:a0:08:14:48:ff:4e:f8:73:6e:4a:35:e3:b8:84:7f:
fd:47:b3:4d:df:a9:90:67:19:d6:1d:14:b0:e7:03:cc:97:40:
ae:53:ea:9c:05:da:e0:d5:a5:1f:d1:80:c8:68:58:94:1c:b6:
a4:26:78:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:30 2026 by rpki-client